CVE-2026-80974

Received Received - Intake

Memory Leak in Linux Kernel SM501 Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-09-29

NVD

CVE-2026-80974

EUVD

EUVD-2026-76297

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's SM501 multifunction device (mfd) driver. Memory allocated during device probe operations is not properly freed when the device is removed, which could lead to gradual memory exhaustion over time.

Detection Guidance

This vulnerability is specific to the Linux kernel's mfd: sm501 driver and involves memory leaks during device removal. Detection requires checking kernel logs for memory leak warnings or inspecting the sm501 driver code for unbalanced memory allocations. No network-specific detection commands are applicable.

Impact Analysis

The impact is primarily on system stability and performance. Memory leaks can cause the system to run out of available memory, leading to slowdowns, crashes, or unexpected behavior in applications relying on the affected driver.

Compliance Impact

This vulnerability involves potential memory leaks in the Linux kernel's SM501 driver, which could lead to resource exhaustion or instability. However, there is no direct evidence in the provided context that this issue impacts compliance with standards like GDPR or HIPAA.

Mitigation Strategies

Apply the kernel patch that adds kfree() calls in the sm501_pci_remove() and sm501_plat_remove() functions. Update to a kernel version containing this fix. Monitor system logs for memory leak warnings related to the sm501 driver.

Hi! I’m here to help you understand CVE-2026-80974. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70